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Amendments to the Claims : 
This listing of claims replaces all prior versions and listings of claims in the application: 

Listing of Claims : 

1 . (currently amended) A method for preventing an administrator te imp e rsonat e from 
impersonating a user of a relational database, which database at least comprises one table with at 
least one user password, which password is used fef logging to permit a user to log on to said 
database, wherein said password is stored as a hash value, said method comprising the steps of: 

adding a trigger to said table, said trigger at least triggering an action when an 
administrator alters said table through a database management system (DBMS) for said database; 

calculating a new password hash value differing from said stored password hash value 
when said trigger is triggered; and 

replacing said stored new password hash value with said new password hash valu e, such 
that said user is disabled from logging on to said database . 

2. (currently amended) A method according to claim 1, comprising the further steps of: 
calculating a check value of said trigge r, such as a hash valu e; and 

comparing said trigg e r control check value at the startup and at regular intervals with a 
recalculated check value. 

3. (currently amended) A method according to claim 1 or 2, comprising the further step 
of comparing! for each active user having access to sensitive data, the hash value of the current 
login password with the hash value of the currently stored password. 

4. (currently amended) A method according to claim 3, wherein the further step -of 
comparing is performed after e v e ry chang e of th e databas e content by said us e r when said user 
changes said database . 
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5. (currently amended) A method according to claim 1 or 2, wherein said trigger 
comprises means for reading a log of actions on said database, means for identifying commands 
for altering user passwords in said log^ and means for identifying which user passwords that have 
been changed. 

6. (currently amended) A relational database system for preventing an administrator 
from impersonating anoth e r a user, which database at least comprises one table with at least one 
user password, which password is used to permit a user to log on to said database, wherein said 

• password is stored as a hash value, said system comprising: 

calculation means for calculating a hash value of a user password, which calculation 
means is not accessible by said administrator; 

trigger means , which for triggering at least said calculation means for calculation of a 
new hash value of said password when an administrator alters said table through a database 
management system (DBMS) of said database; and 

replacing means for replacing said stored hash value with said new hash value for each 
triggered calculatio n, such that said user is disabled from logging on to said database . 

7. (new) The method of claim 2, wherein the check value is a hash value. 



